Security for the rest of us.
Detection, investigation, and incident response for businesses across Latin America — run by someone who kicked out attackers for a living.
The difference
Every alert is read by a human.
Most managed security services now route your alerts through a language model and hope it sorts the real threats from the noise. We've watched that approach quietly file genuine intrusions under "false positive."
Duntze Security uses automation where it removes toil — enrichment, evidence collection, routing — and nowhere that it replaces judgment. Every case is triaged, investigated, and closed by a practitioner who is accountable for the call.
What we do
Detect, investigate, respond.
Detect
Endpoint detection and response on every machine, tuned to your environment. When something looks wrong, it reaches us in seconds — not on the next business day.
Investigate
We pull the evidence — memory, persistence, process history — and establish what actually happened. Full forensic depth, never a canned verdict.
Respond
Contain, isolate, eradicate. With your authorization we act within minutes to stop an active threat, then give you a plain account of what we did and why.
Why Duntze
The case for working with us.
Built and run by one practitioner.
GCFA-certified digital forensics, real incident response, and the entire detection platform engineered and operated in-house. You talk to the person doing the work.
Priced for the businesses we serve.
Enterprise-grade tooling without the enterprise overhead or the per-seat games — a fair, transparent price for coverage that actually holds up.
Local context, international standard.
Years of hands-on DFIR across Europe and Latin America. Threats here have their own shape; the response should be built for it.
Field notes
Notes from the field.
Anatomy of a ClickFix-to-RAT campaign
A trojanized draw.io build, a lookalike C2 domain, and the chain of artifacts that gave it away.
DFIRSweeping common persistence, fast
The handful of registry keys, scheduled tasks, and services that account for most real-world persistence — and how to triage them in minutes.
ForensicsGet in touch
Tell us what you're protecting.
A short conversation is usually enough to tell whether we're the right fit. No sales script, no obligation.
leo@duntzesecurity.com